You have not imported the public keys of the signers, so gpg knows that the signaures are valid but it can't verify that the signers are who they say they are.